Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWDS/ZrCqPOtIiHrZDEH181Do7h2xrLg.roa
File: ZrCqPOtIiHrZDEH181Do7h2xrLg.roa (raw, json)
Hash identifier: CSP0ivzp+v+zP4mpkrqHgmQAkbMn02yQynAvU1joaLY=
Subject key identifier: 66:B0:AA:3C:EB:48:88:7A:D9:0C:41:F5:F3:50:E8:EE:1D:B1:AC:B8
Certificate issuer: /CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
Certificate serial: 04A0
Authority key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/ZrCqPOtIiHrZDEH181Do7h2xrLg.roa
Signing time: Sun 13 Sep 2020 18:10:48 +0000
ROA not before: Sun 13 Sep 2020 18:10:48 +0000
ROA not after: Tue 02 Feb 2021 02:23:59 +0000
asID: 141173
IP address blocks: 2405:a640:1173::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
Validity
Not Before: Sep 13 18:10:48 2020 GMT
Not After : Feb 2 02:23:59 2021 GMT
Subject: CN=66B0AA3CEB48887AD90C41F5F350E8EE1DB1ACB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:37:77:7d:22:58:1c:8e:e8:ad:f9:fb:14:
69:d5:b0:b4:d1:e8:eb:40:e2:ad:84:d1:3b:a4:06:
4e:bd:25:78:a8:1a:65:43:25:21:2a:30:56:b7:09:
4a:13:28:2e:b3:b3:64:52:25:a1:85:2a:61:bf:69:
7d:df:21:17:49:8f:9d:16:93:ad:73:e5:69:1f:91:
14:fd:ea:c4:a3:b6:9e:e3:7b:c7:b6:63:6f:60:50:
66:cc:7c:fc:f5:c5:3d:44:38:44:eb:37:4c:79:37:
98:e5:26:6f:38:1e:4a:5d:a7:a4:e5:ff:e6:10:f2:
0f:64:25:e7:47:8e:ff:45:4a:c9:c6:44:bb:66:2a:
70:53:18:ed:86:dd:a8:c0:6d:d3:f1:4d:32:5b:44:
57:34:25:96:88:c0:f5:22:41:4e:6f:88:77:cd:18:
1f:be:ce:38:23:ae:b7:95:35:c6:8a:16:3e:35:39:
88:fd:c4:41:cd:ad:64:8d:92:68:02:7d:e1:a7:a8:
2c:3e:51:60:ad:24:82:56:de:15:24:8c:57:87:33:
53:51:90:4f:cf:ea:17:db:f7:c5:2b:fd:cb:fa:d1:
2b:f5:cd:b2:8a:de:b0:d0:cd:92:18:91:1d:5a:71:
a7:cf:a7:0a:33:9a:ce:d1:66:02:58:aa:ba:d6:61:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:AA:3C:EB:48:88:7A:D9:0C:41:F5:F3:50:E8:EE:1D:B1:AC:B8
X509v3 Authority Key Identifier:
keyid:29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/ZrCqPOtIiHrZDEH181Do7h2xrLg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:a640:1173::/48
Signature Algorithm: sha256WithRSAEncryption
00:8d:ad:ac:a6:71:9c:d1:bf:46:42:da:9b:36:10:99:9f:87:
45:df:46:be:86:7f:9c:b0:8a:36:a1:b7:0f:41:60:72:e4:39:
e8:52:07:06:63:4e:b7:81:07:62:e6:df:25:88:6d:c1:b9:25:
a9:a7:21:e2:94:8d:4a:12:d7:8b:96:e0:ae:a3:cc:14:00:8d:
cb:54:68:50:29:e1:7a:93:88:c0:f6:a0:6a:77:49:79:cc:8f:
46:c4:95:b8:6a:f8:ac:7d:b4:32:93:4d:b5:78:c0:8b:a6:21:
aa:04:31:b1:45:73:1d:0e:d6:72:fd:79:06:25:39:57:30:ca:
da:2b:f5:fc:e7:bf:10:1f:d0:45:d5:c1:fd:0f:64:fe:59:06:
10:e1:66:0f:d6:83:ce:f7:f6:fb:61:f9:a6:82:76:cd:09:f7:
26:78:03:96:09:3a:cf:3b:90:35:2f:6b:21:03:1f:dd:7a:c5:
50:ab:6d:39:ea:de:a9:d4:e3:33:cb:f7:7f:4a:65:99:0b:8e:
d1:60:56:5f:ba:53:87:62:9e:90:34:9e:d9:21:f5:48:50:04:
ac:52:a3:60:02:88:be:2b:4d:e7:5b:2c:b9:38:40:a6:02:80:
87:9d:db:5f:81:8f:55:b9:13:95:97:f5:30:61:61:b8:71:ac:
0b:31:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org